$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61fb578d-2777-3c7e-a4da-62312ca96ccc.roa File: 61fb578d-2777-3c7e-a4da-62312ca96ccc.roa (raw, json) Hash identifier: Tt4yHjQgtd1J1Ai3F+JUXzELvoV5dJjgqvvWt6rhIbA= Subject key identifier: 66:6F:90:F4:83:4B:D6:0C:E7:57:94:C2:E4:FA:CE:54:93:92:9A:B3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FCB169EFABF8A2B78AF80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61fb578d-2777-3c7e-a4da-62312ca96ccc.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3356 IP address blocks: 130.174.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:cb:16:9e:fa:bf:8a:2b:78:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=c66cd512-3106-429f-a860-81bfd6d2c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:78:fe:47:b3:0e:42:3f:54:43:fd:5b:9e: c7:de:ec:5d:2a:fc:75:96:79:72:39:d5:01:e6:4d: de:03:42:89:3a:fd:6a:1a:c0:38:db:50:a9:fd:ce: f3:e4:4d:ba:fe:4c:a2:fb:01:3d:5a:0d:df:c1:eb: dd:ee:38:07:39:23:e4:c3:c8:f4:99:d0:f7:e2:b5: 0f:87:e3:0b:22:07:35:6c:a2:e9:74:76:41:e5:bc: 42:4d:15:31:ea:79:18:85:0f:70:22:8e:31:70:e0: 5f:f2:94:d3:80:85:a5:93:cc:2a:0f:de:0b:d7:b3: 3f:57:2e:1a:3a:a2:ce:81:ac:7d:0a:3a:b4:7a:a2: 3d:a0:d5:c2:d4:68:e5:a2:80:8e:8b:53:47:fa:59: 25:f7:a9:78:b8:9b:76:0b:48:d6:fc:be:e1:12:40: 78:88:4b:ee:02:8d:03:f1:ab:f0:f9:18:eb:80:13: 82:0b:d6:01:0f:b5:6b:59:e6:19:c5:a8:b8:61:8e: d9:44:67:62:09:8e:7c:bc:fb:22:5e:77:32:c6:fb: 55:0b:28:3a:ea:ce:37:7c:d1:1e:81:7e:cf:ab:58: ee:7c:bb:f7:37:83:dc:cf:9b:3f:e0:29:84:c5:fa: f3:c8:a7:46:9e:22:85:e4:97:e9:a5:30:73:b6:fb: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6F:90:F4:83:4B:D6:0C:E7:57:94:C2:E4:FA:CE:54:93:92:9A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61fb578d-2777-3c7e-a4da-62312ca96ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:98:a4:6b:8f:63:52:e9:86:dd:df:78:69:5b:8d:8d:90:b8: be:5d:d5:e4:2a:f1:54:9e:21:b6:e5:82:4c:16:f6:d1:59:87: 50:6d:17:7e:90:a3:b0:51:94:e6:5e:c4:cb:db:03:d3:c1:e6: 8b:24:d9:c1:72:bc:62:10:81:b8:b3:ca:aa:64:11:5b:90:74: 2d:ae:80:6a:83:ba:97:0b:d9:c2:31:5e:5c:4b:92:69:0a:0b: d3:e5:37:2e:5e:f1:0e:d9:79:6b:94:65:12:69:64:f0:c2:ff: da:fb:36:84:01:4c:57:d3:e8:dc:e4:0e:73:1b:3d:70:6e:db: 35:6c:02:ce:85:cc:e2:b4:5e:17:ed:76:2b:4a:e1:4f:ac:ba: e0:6a:66:3c:08:a2:65:8b:94:0d:80:65:36:11:d0:84:9a:c3: 95:47:e5:33:8a:ea:06:87:92:3e:e1:c6:d0:f1:77:d0:ae:4c: fe:c0:2b:25:11:3d:18:1e:5b:2e:e2:f8:9f:c5:1b:8d:15:7d: c0:dc:30:54:a1:e1:12:a2:27:23:68:43:f9:82:5a:fd:51:d1: e7:a8:fa:2d:78:cc:05:5e:c2:42:3e:9a:5e:66:fc:be:19:8a: f0:4e:93:eb:6b:86:94:1e:a6:60:22:a0:ef:d9:9a:b9:7e:b6: 67:67:c8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8sWnvq/iit4r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YzY2Y2Q1MTItMzEwNi00MjlmLWE4NjAtODFiZmQ2ZDJjNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKV4/kezDkI/VEP9W57H3uxdKvx1lnlyOdUB 5k3eA0KJOv1qGsA421Cp/c7z5E26/kyi+wE9Wg3fwevd7jgHOSPkw8j0mdD34rUP h+MLIgc1bKLpdHZB5bxCTRUx6nkYhQ9wIo4xcOBf8pTTgIWlk8wqD94L17M/Vy4a OqLOgax9Cjq0eqI9oNXC1GjlooCOi1NH+lkl96l4uJt2C0jW/L7hEkB4iEvuAo0D 8avw+RjrgBOCC9YBD7VrWeYZxai4YY7ZRGdiCY58vPsiXncyxvtVCyg66s43fNEe gX7Pq1jufLv3N4Pcz5s/4CmExfrzyKdGniKF5JfppTBztvuiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZvkPSDS9YM51eUwuT6zlSTkpqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjFmYjU3OGQtMjc3Ny0z YzdlLWE0ZGEtNjIzMTJjYTk2Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeYpGuPY1Lpht3feGlbjY2QuL5d1eQq8VSeIbblgkwW9tFZh1BtF36Q o7BRlOZexMvbA9PB5osk2cFyvGIQgbizyqpkEVuQdC2ugGqDupcL2cIxXlxLkmkK C9PlNy5e8Q7ZeWuUZRJpZPDC/9r7NoQBTFfT6NzkDnMbPXBu2zVsAs6FzOK0Xhft ditK4U+suuBqZjwIomWLlA2AZTYR0ISaw5VH5TOK6gaHkj7hxtDxd9CuTP7AKyUR PRgeWy7i+J/FG40VfcDcMFSh4RKiJyNoQ/mCWv1R0eeo+i14zAVewkI+ml5m/L4Z ivBOk+trhpQepmAioO/Zmrl+tmdnyMI= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:17 2025 by rpki-client